Description
Cross-site scripting (XSS) vulnerability in the CSRF protection scheme in WordPress before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via a CSRF attack with an invalid token and quote characters or HTML tags in URL variable names, which are not properly handled when WordPress generates a new link to verify the request.
Remediation
References
Related Vulnerabilities
WordPress Plugin Easy Author Image Information Disclosure (1.5)
Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2020-2164)
Oracle JRE CVE-2022-21624 Vulnerability (CVE-2022-21624)
Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-20920)
PHP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-10546)